Draft privilege escalation policy for comments

[Till Maas]

On Fri, Jan 29, 2010 at 02:27:13PM -0800, Adam Williamson wrote:

> Please do provide any and all feedback on the proposed policy. if we can
> get it into a shape which most people on the list would find acceptable,
> my next step will be to take it back to FESco for them to review.
> Thanks.

I don't understand this sentence:
"with the exceptions that the 'cause to be performed' provision is waived
in this case"
maybe it already covers it, but there are more directories a user can
write to then just ~, /tmp, /var/tmp or /usr/tmp, e.g. /dev/shm and with
certain restrictions /var/spool/{cron,mail,cups,at}.

Regards
Till
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/devel/attachments/20100130/794e1f01/attachment.bin